OpenOffice Multiple Buffer Overflow Vulnerabilities - Dec12 (Windows)

This host is installed with OpenOffice and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbopenofficemultbofvulndec12win.nasl 6018 2017-04-24 09:02:24Z teissa $ OpenOffice Multiple Buffer Overflow Vulnerabilities - Dec12 Windows Authors: Rachana Shetty Copyright: Copyright...

OpenOffice Multiple Buffer Overflow Vulnerabilities (Dec 2012) - Windows

OpenOffice is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-4233

LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org OOo, allows remote attackers to cause a denial of service NULL pointer dereference via a crafted 1 odt file to vcllo.dll, 2 ODG Drawing document file to svxcorelo.dll, 3 PolyPolygon record in a .wmf Window Meta File file...

DEBIAN-CVE-2012-4233

LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org OOo, allows remote attackers to cause a denial of service NULL pointer dereference via a crafted 1 odt file to vcllo.dll, 2 ODG Drawing document file to svxcorelo.dll, 3 PolyPolygon record in a .wmf Window Meta File file...

OpenOffice / LibreOffice DoS

NULL pointer dereference on different formats parsing...

[SECURITY] [DSA 2570-1] openoffice.org security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2570-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez October 31, 2012 http://www.debian.org/security/faq -...

Portable Multi-boot Security Suite: Katana

Katana is a portable multi-boot security suite which brings together many of today’s best security distributions and portable applications to run off a single Flash Drive. It includes distributions which focus on Pen-Testing, Auditing, Forensics, System Recovery, Network Analysis, and Malware...

Apache OpenOffice < 3.4.1 Multiple Heap-Based Buffer Overflows

The version of Apache OpenOffice installed on the remote host is prior to 3.4.1. It is, therefore, affected by multiple heap-based buffer overflow vulnerabilities related to XML manifest handling : - An error exists related to handling the XML tag hierarchy. - A boundary error exists when handlin...

CVE-2012-2665 Manifest-processing errors in Apache OpenOffice 3.4.0

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2012-2665 Manifest-processing errors in Apache OpenOffice 3.4.0 Reference: http://www.openoffice.org/security/cves/CVE-2012-2665.html Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache OpenOffice 3.4.0, all...

OpenOffice security vulnerabilities

Multiple buffer overflows...

[PRE-SA-2012-05] Multiple heap-based buffer overflows in LibreOffice / OpenOffice

PRE-CERT Security Advisory ========================== Advisory: PRE-SA-2012-05 Released on: 6 August 2012 Affected product: LibreOffice 3.5.5 Apache OpenOffice = 3.4.0 Impact: code execution Origin: encrypted office files CVSS Base Score: 9.3 Impact Subscore: 10 Exploitability Subscore: 8.6 CVSS...

CVE-2012-2665

CVE-2012-2665 affects OpenOffice.org and LibreOffice prior to 3.5.5. The issue is a heap-based buffer overflow in the XML manifest encryption tag parsing when processing Open Document Text (.odt) files. An attacker could craft an ODT with (1) a child tag under an incorrect parent, (2) duplicate t...

libreoffice: Multiple heap-based buffer overflows in the XML manifest encryption handling code

Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Open Document Text .odt file with 1 a child tag within...

Scientific Linux Security Update : openoffice.org on SL5.x i386/x86_64

Sean Larsson found a heap overflow flaw in the OpenOffice memory allocator. If a carefully crafted file was opened by a victim, an attacker could usethe flaw to crash OpenOffice.org or, possibly, execute arbitrary code. CVE-2008-2152 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : openoffice.org on SL5.x, SL4.x, SL3.x i386/x86_64

A heap overflow flaw was found in the TIFF parser. An attacker could create a carefully crafted document containing a malicious TIFF file that could cause OpenOffice.org to crash or possibly execute arbitrary code if opened by a victim. CVE-2007-2834 %NASLMINLEVEL 70300 C Tenable Network Security...

libwpd: Memory overwrite flaw by processing certain WordPerfect (WPD) documents

The WPXContentListener::closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org OOo before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report th...

DEBIAN-CVE-2012-2149

The WPXContentListener::closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org OOo before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report th...

CVE-2012-2149

The WPXContentListener::closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by OpenOffice.org OOo before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect .WPD document that causes a negative array index to be used. NOTE: some sources report th...

CVE-2012-1149

Integer overflow in the vclmi.dll module in OpenOffice.org OOo 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JP...

DEBIAN-CVE-2012-1149

Integer overflow in the vclmi.dll module in OpenOffice.org OOo 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JP...